Skip to main content

Java Keystore - Certificate management

 Java Keystore - Certificate Management

Dealing with the Java keystore is not new for the software developers working with Java.

But many a times, developers who work with several other technology stack come across the necessity of dealing with java keystoe(jks).

A simple, easy way to deal with it is given below.

The software

The software I am working with is KeyStore Explorer. 



This software can be used on Windows, Linux and MacOS. Installable can be downloaded separately. If you are fan of portable apps, you can download the zip version that will work with all the operating systems. This software can be downloaded from the link below 

https://keystore-explorer.org/downloads.html

Setup

Install as per your operating system. For portable version, simply unzip to the desired folder.

The Keystore explorer needs a JRE to run. If your laptop has a pre-installed JRE, please make sure the JAVA_HOME environment variable is set.

If you already have a portable JRE, you can copy the JRE folder in the installation directory of the KeyStore Explorer.

Working with KeyStore Explorer

Creating a new keystore

  1. Open the KeyStore Manager (kse.exe/ kse.sh)
  2. Click on the new button on the left top corner (or File-> New)
  3. Choose the type of keystore preferred(PKCS12 and JKS being mostly used)
  4. Now add your certificates to the keystore using the "Import Trusted Certificate" option. Simply click and browse the certificate to add it to the keystore.
  5. Save your keystore- Click on the Save button on the options or File ->Save or Save As, choose the target location and the target filename.
  6. When saving the keystore, it will ask you to set and confirm the password for the keystore. Please make sure to keep this information safe as you would need this in future when using the keystore.

Note : Please make sure to append the file extension as you prefer. The software does not automatically add the filename extension.

Opening and editing a keystore

  1. Open the KeyStore Manager (kse.exe/ kse.sh)
  2. Click on the Open button or File -> Open option.
  3. Browse and select your jks file.
  4. It will ask for the keystore password, please enter it in the password box.

Now the keystore is opened for viewing and editing. You can add new certificates or keys to the keystore or remove the expired certificates and keys from the store.


Comments

Popular posts from this blog

CR-2032 Batteries- Where are they used

 Batteries, CR2032. What is CR2032 (also written CR-2032)? CR2032 is a non rechargeable 3V lithium battery which is used in many electronic devices. It resembles a coin and hence it is also called a coin cell or coin battery.  A Panasonic CR2032 cell What are it's main applications and lifetime in each cases? 1. Car keyfobs . (Lifetime - Normally works for several years, 3-8 years) 2. Apple Airtag. (Lifetime - 1 to 1.5 years) 3. Temperature and humidity sensors. (Around 1-2 years) 4. Toys.(Will run out very soon 😜) 5. Smart home sensors. 6. Calculators. 7. Remote controls for garages etc.

Termux - The android Terminal

Termux No hesitation, you can certainly call Termux “The Android terminal”. Owing to it’s simplicity and capabilities, Termux stand so close to the original Linux terminal. Who is it for and who should read this? This is beginner article which will introduce you to the fundamentals of using Linux terminal on android devices. To understand something here, you should barely understand English and nothing else is a pre-requisite. 🤓 Let us figure out the basics.   Android If you are using an android device, you know that android is the operating system that run the show on your mobile phone. Android is an operating system with its core based on Linux. In fact, android is based on a modified version of Linux optimized for mobile devices. Terminal Terminal is a command line interface which can be used to communicate with or control the Operating system. So, a linux terminal can be used to control a Linux device. Terminal is a tool that comes default with a full fat Unix or Linux opra...